Just past midnight on May 11, 2024, the Vermont legislature passed the Vermont Data Privacy Act (VDPA). VDPA, if signed by Governor Phil Scott, will take effect on July 1, 2025, and will make Vermont the 18th state to establish
Latest from Taft Privacy & Data Security Insights - Page 10
HHS Amends HIPAA Privacy Rule to Further Protect Reproductive Health Information
In an effort to support reproductive health care privacy, the U.S. Department of Health and Human Services (HHS) recently modified the standards for privacy of individually identifiable health information (the “Privacy Rule”) relevant to an individual’s reproductive health information under
Artificial Intelligence, Real Liability: Who’s on the hook when things go wrong?
Artificial intelligence, referred to as “AI” for short, has had an outsized impact on nearly every aspect of human existence. If that sounds like an overstatement, it’s not— machine learning systems and generative AI tools have now been integrated into
California Privacy Protection Agency Issues “Minimal” Guidance on CCPA in First Enforcement Advisory
Yesterday, the California Privacy Protection Agency (CPPA) issued its first enforcement advisory regarding the California Consumer Privacy Act (CCPA). Enforcement Advisory No. 2024-01(the Advisory) is solely devoted to data minimalization, which the CPPA describes as “a foundational principle in
CMMC 2.0 Is Here to Stay: Where Do We Start?
Last December, the Department of Defense (“DoD”) published its proposed rule setting forth cybersecurity requirements for defense contractors and subcontractors. These requirements are designated with a particular Cybersecurity Maturity Model Certification (CMMC) level that is associated with the contractor’s
California Delivers to DoorDash $375,000 Civil Penalty: California AG Announces Second CCPA Settlement
On Wednesday, February 21, 2024, California Attorney General Rob Bonta announced that his office reached a settlement with DoorDash, which addresses allegations that the company facilitated several violations of both the California Consumer Privacy Act (CCPA) and the California Online
Children’s Online Privacy Protection Act Update: Part Deux! New FTC Rulemaking Proposal
As we discussed last year, the Federal Trade Commission (FTC) has increased its focus and its enforcement related to the Children’s Online Privacy Protection Act (COPPA), especially in the educational context. Now the FTC is taking further steps to
California Appeals Court Holds CPRA’s Implementing Rules Are Immediately Enforceable
Late last week, the California Third District Court of Appeal (the “Court”) overturned a lower court decision delaying the enforcement of amended privacy regulations. On Friday, February 9, 2024, the Court held that the California Privacy Protection Agency (the
Navigating FCC’s Latest Rules: A Quick Guide to Compliance with new TCPA Regulations
In late 2023, the Federal Communication Commission (FCC) adopted significant changes to its Telephone Consumer Protection Act (TCPA) regulations. The purpose of the changes was to address escalating consumer threats caused by scam robocalls and robotexts.
The FCC created new
